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Preliminary Amendment 

Amendments to the Claims 

1 . (CURRENTLY AMENDED) A method for defence against at least one 
attack made by means of differential power analysis in at least one hyperelliptic 
cryptosystem, in particular in at least one hyperelliptic public key cryptosystem, 
which is given by at least one hyperelliptic curve (€>of any genus ^-over a finite 
field ^K^-in a first group, where the hyperelliptic curve (G)-is given by at least one co- 
efficient, characterised in that the hyperelliptic curve {e^and/or at least one element 
of the first group, in particular at least one in particular reduced divisor and/or at least 
one intermediate result of a scalar multiplication is randomised. 

2. (CURRENTLY AMENDED) A method as claimed in claim 1, 
characterised in that the bits of the operand to be processed and/or encoded in the 
hyperelliptic cryptosystem are represented by the hyperelliptic curve-(€^, in particular 
by at least one co-efficient of the hyperelliptic curve-(4^, and/or by at least one base 
element of the cryptosystem, such as by at least one in particular reduced divisor 
and/or at least one intermediate result of a scalar multiplication. 

3. (CURRENTLY AMENDED) A method as claimed in claim 1 or 2 claiinl, 
characterised in that at least one scalar multiplication in the Jacobian variation 
J(C){K) of the hyperelliptic curve (Stakes place in a second group different from the 
first group and isomorphic in relation to the first group, in particular selected at 
random. 

4. (CURRENTLY AMENDED) A method as claimed in claim 3, 
characterised by the following steps: 

- transformation of the Jacobian variation J(CXK) of the hyperelliptic 
curve (Q-by means of at least one depiction-(^, in particular by means of at least one 
K-isomorphism, into the Jacobian variation-B^>{K> of the transformed hyperelliptic 
curve-( e - ^Q) ; 

- multiplication of the Jacobian variation c/f^XK) of the transformed 
hyperelliptic curve (C^)-with at least one scalar-(«); and 
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- back transformation of the Jacobian variation-D^fCy^K) multiplied by 
the scalar («) of the transformed hyperelliptic curve (^)-by means of the depiction ^ 
^inverse to the depiction (^in a Jacobian variation^^lf^^ of the hyperelliptic curve 
{€>-multiplied by scaIar-(«), 

- where 

- the depiction ^Corresponds to the transition from the first group to 
the second group 

- the inverse depiction (^r^)-corresponds to the transition from the 
second group to the first group. 

5. (CURRENTLY AMENDED) A method as claimed in at ieaot ono of 
claims 1 to 4 claim K characterised by the following steps: 

- depiction of at least one in particular reduced divisor (a0)-with 
associated polynomial pair as at least one quintuplet {y^^^^^fj^m projective 
co-ordinates, 

where Uft) = + Uit/Z+ LVZand V(t) = F/r/Z+ Vo/Z; 

- selection, in particular random selection, of at least one non-vanishing 
element {#>-from the field-(K''); and 

- conversion of the quintuplet f^^^^^^^-^V^by means of a selected 
element (s^into the converted quintuplet-[^^y^-^<?r^v7^^ 

6. (CURRENTLY AMENDED) A method as claimed in at least on e of 
claims 1 to 4 claim L characterised by the following steps: 

- depiction of at least one in particular reduced divisor (^^with 
associated polynomial pair as at least one sextuplet f4^^Hy^?r-f^^r+W^^r^^in 
projective co-ordinates, 

where U(0 = + Ujt/Zj^ + Uq/Zj^ and V(t) = Vjt/fZj^Z^) + Vo/fZ/Z^); 

- selection, in particular random selection, of at least two non- 
vanishing elements 

(#4r^^from the field-^""); and 

- conversion of the sextuplet {y^^^^j^g^j,^^by means of a 
selected elements 
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<#^r^5>"into the converted scxtuplct-^js/u^r^/i/gr^/i^^^r^/^^^^. 

7. (CURRENTLY AMENDED) A method as claimed in any ofatloastono 
of claim G I to 6 claim 1 , characterised in that the method is implemented on at least 
one microprocessor in particular allocated to at least one chip card and/or in particular 
to at least one smart card. 

8. (CURRENTLY AMENDED) A microprocessor working according to a 
method as claimed in at least one of claims 1 to 7 claim 1 . 

9. (ORIGINAL) A device, in particular a chip card and/or in particular a smart 
card, with at least one microprocessor as claimed in claim 8. 

10. (CURRENTLY AMENDED) Use of a method as claimed in at least one of 
claims 1 to 7 claim 1 and/or at least one microprocessor as claimed in claim 8 and/or at 
least one device in particular at least one chip card and/or at least one smart card as 
claimed in claim 9 in the defence against at least one attack made by means of 
differential power analysis on at least one hyperelliptic cryptosystem, in particular at 
least one public key cryptosystem. 
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